This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
File:                     3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa (raw, json)
Hash identifier:          TpQqENPCKg36dQXIyXSXZdNl9EAhROMOEV0NrLYhyRE=
Subject key identifier:   3D:D8:B3:34:0D:A6:29:06:F9:56:17:CF:17:F9:EC:CC:B8:61:0A:FE
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       61FA2BA6CFBDB1B35ED7169845FA15843AFF92D0
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa
Signing time:             Wed 10 Dec 2025 04:02:32 +0000
ROA not before:           Wed 10 Dec 2025 03:57:32 +0000
ROA not after:            Wed 09 Dec 2026 04:02:32 +0000
asID:                     133798
IP address blocks:        203.128.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 00:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fa:2b:a6:cf:bd:b1:b3:5e:d7:16:98:45:fa:15:84:3a:ff:92:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Dec 10 03:57:32 2025 GMT
            Not After : Dec  9 04:02:32 2026 GMT
        Subject: CN=3DD8B3340DA62906F95617CF17F9ECCCB8610AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:55:42:1c:0a:2d:42:90:59:5a:42:17:fe:
                    f1:42:1d:91:1a:fa:bc:75:eb:61:1d:cb:73:e9:fb:
                    73:3b:c3:74:79:87:d2:ea:54:81:94:8e:78:11:de:
                    13:e4:df:16:96:7b:ca:47:92:6f:8c:93:cf:92:07:
                    70:78:2d:03:48:90:a6:68:f1:4e:2a:eb:a2:5e:10:
                    e8:11:ee:e8:05:43:e5:50:01:0c:ee:8a:53:c3:7e:
                    49:5c:1a:99:08:39:53:73:09:0a:cc:97:11:b4:46:
                    67:6e:65:9b:c4:ee:76:99:14:52:32:b6:78:dd:83:
                    a2:7f:ba:54:50:37:ce:a0:29:7c:e9:11:80:16:33:
                    2d:35:84:b7:5e:0b:50:ab:6a:33:b2:51:a8:9c:7f:
                    d6:b0:a0:74:54:7e:3e:be:94:e7:52:3a:15:6a:fe:
                    e3:b7:0e:0d:7e:07:a4:97:fc:0e:e4:e0:9c:57:42:
                    6c:41:df:ae:c6:bc:cd:bc:2d:93:e4:ec:a1:83:83:
                    d1:38:b9:cf:0c:9e:1e:35:4f:53:bc:b1:9b:59:f9:
                    99:59:34:d9:22:53:18:73:62:a3:52:40:ae:1a:70:
                    75:d0:f4:98:6b:6d:d3:d4:3b:76:bd:02:fb:6c:68:
                    b5:50:9a:fc:58:0c:02:42:6c:e5:a9:ec:84:00:39:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D8:B3:34:0D:A6:29:06:F9:56:17:CF:17:F9:EC:CC:B8:61:0A:FE
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3230332e3132382e3234382e302f32322d3232203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.128.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:b5:d2:ca:69:b5:ad:57:db:37:ac:6a:f7:a0:63:40:f4:15:
         45:15:f9:10:24:47:99:6e:41:e9:45:e7:62:3b:89:87:cd:9c:
         44:0b:59:2f:eb:ad:5a:bc:a8:69:3a:62:3b:e6:a8:ba:7e:0d:
         10:02:f1:ed:8d:57:76:02:76:68:aa:4f:a2:19:15:6f:a8:7a:
         af:3a:9b:1c:13:4a:cc:da:2b:95:83:e0:e2:d6:f4:08:e8:6e:
         b5:a7:2f:08:29:d5:e8:04:c1:e3:bd:1f:12:5a:a5:5b:a2:78:
         08:a9:0b:45:db:e6:ed:8a:0e:1a:2a:9d:e5:15:93:3a:48:bf:
         aa:f4:32:1e:fb:8a:4c:9c:c7:81:49:b5:c2:39:c5:e6:08:3f:
         a3:3b:ab:b8:c6:89:f5:0f:90:da:5d:29:55:c7:e7:f5:aa:46:
         95:5b:c0:8c:ee:d5:3b:c0:84:7f:30:4b:5f:80:c2:50:a7:f4:
         3f:eb:2d:ba:84:86:b5:4e:3b:4d:e6:d0:f8:63:83:e0:2e:6a:
         e1:d1:1b:b5:7a:27:39:67:bd:8b:d8:5f:7b:d9:3e:6d:d8:7c:
         fa:c7:8a:ed:5d:c8:e8:22:41:8f:b4:39:87:21:f4:31:4e:da:
         a7:19:33:f6:be:34:24:cc:46:c0:a3:b9:91:1f:5f:1a:e0:3a:
         f5:58:f1:c4
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUYforps+9sbNe1xaYRfoVhDr/ktAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4
NEMxNkIzOTAeFw0yNTEyMTAwMzU3MzJaFw0yNjEyMDkwNDAyMzJaMDMxMTAvBgNV
BAMTKDNERDhCMzM0MERBNjI5MDZGOTU2MTdDRjE3RjlFQ0NDQjg2MTBBRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzaVVCHAotQpBZWkIX/vFCHZEa
+rx162Edy3Pp+3M7w3R5h9LqVIGUjngR3hPk3xaWe8pHkm+Mk8+SB3B4LQNIkKZo
8U4q66JeEOgR7ugFQ+VQAQzuilPDfklcGpkIOVNzCQrMlxG0RmduZZvE7naZFFIy
tnjdg6J/ulRQN86gKXzpEYAWMy01hLdeC1CrajOyUaicf9awoHRUfj6+lOdSOhVq
/uO3Dg1+B6SX/A7k4JxXQmxB367GvM28LZPk7KGDg9E4uc8Mnh41T1O8sZtZ+ZlZ
NNkiUxhzYqNSQK4acHXQ9JhrbdPUO3a9AvtsaLVQmvxYDAJCbOWp7IQAOZiJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUPdizNA2mKQb5VhfPF/nszLhhCv4wHwYDVR0j
BBgwFoAUNHonWYXq5bybpsXLkpwG+oTBazkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzAzZTZiYi03MzQ5LTQ3YWEtYTRjZC01MWQ4YTBlMjIyZjYvMC8zNDdBMjc1OTg1
RUFFNUJDOUJBNkM1Q0I5MjlDMDZGQTg0QzE2QjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzQ3QTI3NTk4NUVBRTVCQzlCQTZDNUNCOTI5QzA2RkE4NEMx
NkIzOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMDNlNmJiLTczNDktNDdhYS1h
NGNkLTUxZDhhMGUyMjJmNi8wLzMyMzAzMzJlMzEzMjM4MmUzMjM0MzgyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMTMzMzMzNzM5Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALLgPgwDQYJ
KoZIhvcNAQELBQADggEBAFO10sppta1X2zesavegY0D0FUUV+RAkR5luQelF52I7
iYfNnEQLWS/rrVq8qGk6YjvmqLp+DRAC8e2NV3YCdmiqT6IZFW+oeq86mxwTSsza
K5WD4OLW9AjobrWnLwgp1egEweO9HxJapVuieAipC0Xb5u2KDhoqneUVkzpIv6r0
Mh77ikycx4FJtcI5xeYIP6M7q7jGifUPkNpdKVXH5/WqRpVbwIzu1TvAhH8wS1+A
wlCn9D/rLbqEhrVOO03m0Phjg+AuauHRG7V6JzlnvYvYX3vZPm3YfPrHiu1dyOgi
QY+0OYch9DFO2qcZM/a+NCTMRsCjuZEfXxrgOvVY8cQ=
-----END CERTIFICATE-----
Generated at Fri Dec 19 14:38:22 2025 by rpki-client